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AMENDMENTS TO THE CLAIMS 

1. (Currently amended) A method for authorizing a client computer to access a 
second computer server-based application based upon previously provided authorization to 
acc e ss a first comput e r access a first server-based application , comprising; 

(a) receiving a request to access said second computer server-based 

application : 

(b) in response to said request: 

(i) determining a session length indicating a length of time said client 
computer has been authorized to access said first computer server-based application : 

(ii) calculating a hash value for an authorization ticket received from 
said first computer server-based application , said session length, and a secret shared between 
said client computer and said second computer server-based application, and 

(iii) transmitting a request for authorization to said second comput e r 
server-based application comprising said hash value, said authorization ticket, and said session 
length. 

2. (Original) The method of Claim 1, -wherein said authorization ticket comprises a 
time stamp, and wherein determining a session length comprises subtracting said time stamp 
from an elapsed time counter to determine said session length. 

3. (Currently amended) The method of Claim 2, wherein said elapsed time counter 
is started when said authorization ticket is received from said first eeraputer server-based 
application . 

4. (Currently amended) The method of Claim 3, wherein said authorization ticket is 
received from said first computer server-based application when said client computer is 
authorized to access said first comput e server-based application . 
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5. (Currently amended) The method of Claim 1, wherein calculating a hash value 
comprises performing an MD5 hash of an authorization ticket received from said first computer 
server-based application, said session length, and a secret shared between said client computer 
and said second computer server-based application . 

6. (Currently amended) The method of Claim 1 , fUrther comprising: 
starting a persistence timer; 

determining whether said persistence timer has reached a predefined value prior to 
receiving a response from said second comput e r server-based application ; and 

in response to determining that said persistence [[time]] timet has reached a predefined 
value prior to receiving a response from said second comput e r server-based application, deleting 
said authorization ticket, said session length and said hash value from said client computer. 

7. (Currently amended) The method of Claim 6, further comprising: 

in response to determining that said persistence timer has not reached a predefined value 
prior to receiving a response from said second comput e r server-based application , receiving said 
response from said second comput e r server-based application and displaying said response at 
said client computer. 

8. (Currently amended) The method of Claim 1, wherein said first oomputor 
compris es server-based application is an instant messaging server comput e r and wherein said 
second comput e r compris es server-based application is a Web server oomputor . 

9. (Original) A computer-controlled apparatus operative to perform the method of 
Claim 1. 

10. (Original) A computer-controlled apparatus operative to perform the method of 
Claim 1 Claim 2 . 
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11. (Original) A computer-readable medium containing computer-readable 
instructions which, when executed by a computer, perform the method of Claim L 

12. (Original) A computer-readable medium containing computer-readable 
instructions which, when executed by a computer, perform the method of Claim 2, 

13. (Currently amended) A method for authorizing a client computer to access a 
second comput e r server-based application based upon previously provided authorization to 
access a first computer server-based application, comprising: 

(a) receiving a request for authorization to access said second computer 
server-based application from said client computer comprising a hash value, an authorization 
ticket, and a session length; 

(b) computing a new hash value for said authorization ticket, said session 
length, and a copy of a secret shared between said client computer and said second computer 
server-based application : 

(c) determining whether said hash value received from said client computer is 
identical to said new hash value; and 

(d) in response to determining that said hash value received from said client 
computer is identical to said new hash value, authorizing said client computer to access said 
second computer server-based application . 

14. (Currently amended) The method of Claim 13, further comprising: 

(e) in response to determining that said hash value received from said client , 
computer is identical to said new hash value; 

(i) determining whether a sum of said session length and a time stamp 
received as part of said authorization ticket is within a preset threshold value of a current time; 
and 
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(ii) in response to detennining that the sum of said session length and 
said time stamp is within said preset threshold value, authorizing said client computer to access 
said second comput e r server-based application . 

15. (Currently amended) The method of Claim 14, further comprising: 

(f) in response to determining that said hash value received from said client 
computer is not identical to said new hash value, not authorizing said client computer to access 
said second computer server-based application . 

16. (Currently amended) The method of Claim 15 3 further comprising: 

(g) in response to determining that the sum of said session length and said 
time stamp is not within said preset threshold value, not authorizing said client computer to 
access said second computer server-based application . 

17. (Original) A computer-controlled apparatus operative to perform the method of 
Claim 13. 

18. (Original) A computer-controlled apparatus operative to perform the method of 
Claim 14. 

19. (Original) A computer-readable medium containing computer-readable 
instructions which, when executed by a computer, perform the method of Claim 13. 

20. (Original) A computer-readable medium containing computer-readable 
instructions which, when executed by a computer, perform the method of Claim 14. 

21. (Currently amended) The method of Claim 13, wherein said first computer 
compriflos server-based application is an instant messaging server computer and wherein said 
second comput e r compris e s server-based application is a Web server computer . 
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